$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft File: TiWTT-jYmVlCXRAY6xIZgdolCYU.mft (raw, json) Hash identifier: DM47TcenOiRN5CQSdCbGI8gys0/+QI3myA40OfUlMm0= Subject key identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985 Certificate serial: 094B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft Manifest number: 093D Signing time: Sat 21 Jun 2025 06:14:46 +0000 Manifest this update: Sat 21 Jun 2025 06:14:46 +0000 Manifest next update: Sat 21 Jun 2025 12:14:46 +0000 Files and hashes: 1: NeekGFR5NIVtajaJ5HdjX8R8fNo.roa (hash: AQAjAJlgu+LEfO1yH586ESbhoVxFXl/P5tNzJvUMOEY=) 2: TiWTT-jYmVlCXRAY6xIZgdolCYU.crl (hash: qToUe7Fs4jBBI8yU2JruV+77/jhX0vBSvIJLRvjziag=) 3: yDAVP8H_i8ah3EyHDhnWJS6tjLU.roa (hash: CIzjhzifWM6nzfG8hoac4C+5WTIAXYEvq69J+GVoSuE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985 Validity Not Before: Jun 21 06:14:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A4B2B88951A8428FE734C0123EB4D9F99B5E9B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:f2:f9:80:67:dd:ba:b4:42:f1:a7:fa:39: 6f:70:57:a4:58:e5:48:c0:0f:04:77:f6:69:b0:29: 57:6a:67:fc:39:25:c6:c7:2e:44:7c:6d:d8:ad:4f: b1:bf:cd:63:c9:94:1a:81:93:03:08:aa:8b:18:cc: 69:fb:48:71:f6:6d:1f:69:2e:b3:5d:2e:4a:c9:e4: a8:71:94:02:fb:d4:1d:2b:f2:90:b0:f2:df:e9:90: c6:28:13:da:09:5f:90:05:d6:f2:80:8c:17:5a:de: 7b:0e:35:ce:eb:e3:ac:78:10:d6:44:f1:b1:ec:72: bc:42:dd:8a:32:79:9d:9a:b8:2b:8c:c5:ff:d7:a7: 32:ff:d0:a2:35:2c:ff:26:42:62:b7:42:33:63:b3: 88:22:e0:f2:3c:75:ee:76:4a:c4:6d:ef:20:d4:9f: 13:59:71:b6:bb:65:35:77:fc:48:53:66:e6:d7:ad: 74:c7:94:65:f6:81:06:b6:f6:d7:25:97:fc:45:94: 5c:16:c0:1e:eb:00:63:ad:4f:bb:e7:b8:d3:8b:5c: 91:18:24:4f:56:93:59:6f:35:bf:6c:39:10:26:1a: 00:ea:7a:db:3e:1f:9d:6d:9a:0a:fd:5c:70:76:15: a2:a3:98:57:79:cd:c3:e0:bd:ef:61:6f:38:c1:f4: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:B8:89:51:A8:42:8F:E7:34:C0:12:3E:B4:D9:F9:9B:5E:9B:3B X509v3 Authority Key Identifier: keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:90:65:ba:dc:a1:3b:ac:ea:2c:ff:8f:2e:5b:3c:94:ec: 0b:39:3d:71:b8:12:73:52:80:65:f2:66:90:d6:27:e4:2a:54: 04:a3:e0:04:0c:9d:45:f9:d1:c4:19:94:57:cc:37:ef:47:1b: 9e:14:37:9e:fc:ae:72:3f:cc:1f:a8:7d:e6:78:24:45:ff:28: 72:98:f1:49:eb:60:20:53:aa:19:27:24:5c:a5:2f:a6:9c:93: 5d:3f:38:c1:6f:5c:63:5c:f5:a1:f5:9c:49:3f:20:3d:f1:25: 22:2c:5b:e5:67:98:2e:59:5c:88:ec:67:8f:45:2f:3d:bc:db: 54:61:77:10:7d:eb:a9:62:69:f5:76:71:e3:7d:cd:00:1b:23: da:89:9a:9a:ee:2f:98:ab:ba:b5:aa:83:8b:c2:ca:0f:f2:b4: fd:cf:73:dd:04:22:58:2f:0c:ba:b7:47:7d:56:85:7a:57:2c: 06:4e:97:7c:43:63:4b:2e:44:58:72:00:49:df:a8:59:b0:d1: 24:ed:6e:07:fd:96:ad:21:6c:0e:87:5d:8c:22:22:73:0e:9b: c1:e2:68:a5:3e:63:48:dc:55:8f:5a:be:12:10:6d:24:1b:a2: 6d:1d:c9:da:6a:55:24:c3:34:85:ea:34:0f:07:c5:50:7b:be: 77:8d:e0:a6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEUy NTkzNEZFOEQ4OTk1OTQyNUQxMDE4RUIxMjE5ODFEQTI1MDk4NTAeFw0yNTA2MjEw NjE0NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE0QjJCODg5NTFBODQy OEZFNzM0QzAxMjNFQjREOUY5OUI1RTlCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDICvL5gGfdurRC8af6OW9wV6RY5UjADwR39mmwKVdqZ/w5JcbH LkR8bditT7G/zWPJlBqBkwMIqosYzGn7SHH2bR9pLrNdLkrJ5KhxlAL71B0r8pCw 8t/pkMYoE9oJX5AF1vKAjBda3nsONc7r46x4ENZE8bHscrxC3YoyeZ2auCuMxf/X pzL/0KI1LP8mQmK3QjNjs4gi4PI8de52SsRt7yDUnxNZcba7ZTV3/EhTZubXrXTH lGX2gQa29tcll/xFlFwWwB7rAGOtT7vnuNOLXJEYJE9Wk1lvNb9sORAmGgDqets+ H51tmgr9XHB2FaKjmFd5zcPgve9hbzjB9LXTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUpLK4iVGoQo/nNMASPrTZ+ZtemzswHwYDVR0jBBgwFoAUTiWTT+jYmVlCXRAY 6xIZgdolCYUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA0 OC9UaVdUVC1qWW1WbENYUkFZNnhJWmdkb2xDWVUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RpV1RULWpZbVZsQ1hSQVk2eElaZ2RvbENZVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNDgvVGlXVFQtalltVmxD WFJBWTZ4SVpnZG9sQ1lVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADkqkGW63KE7rOos/48uWzyU7As5PXG4EnNSgGXyZpDWJ+QqVASj4AQMnUX5 0cQZlFfMN+9HG54UN578rnI/zB+ofeZ4JEX/KHKY8UnrYCBTqhknJFylL6ack10/ OMFvXGNc9aH1nEk/ID3xJSIsW+VnmC5ZXIjsZ49FLz2821RhdxB966liafV2ceN9 zQAbI9qJmpruL5irurWqg4vCyg/ytP3Pc90EIlgvDLq3R31WhXpXLAZOl3xDY0su RFhyAEnfqFmw0STtbgf9lq0hbA6HXYwiInMOm8HiaKU+Y0jcVY9avhIQbSQbom0d ydpqVSTDNIXqNA8HxVB7vneN4KY= -----END CERTIFICATE-----Generated at Sat Jun 21 11:23:24 2025 by rpki-client